Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File:                     0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier:          IqhysPXj8UJwIxR8pZ8x+pm0/1lckK+k/gQgXayLSdA=
Subject key identifier:   80:FA:E2:64:7D:00:DE:3B:A0:13:46:04:43:89:A2:D4:E1:78:8C:B8
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer:       /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial:       01A13D81672CBE93F25AB8F0E6CA96DE1241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number:          0EB3
Signing time:             Thu 15 Oct 2026 03:00:52 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:52 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:52 +0000
Files and hashes:         1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: tR20HHvbTNBna3aoBP92Fe88Yxbhs2r8TzE5IJRycPQ=)
                          2: NGjB506tQD4M9JyQ0y5L8sd4Coc.roa (hash: bikmvDPhCClihvHahEW9OUu5noBCQJiGJ2NSrdBDNrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:67:2c:be:93:f2:5a:b8:f0:e6:ca:96:de:12:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
        Validity
            Not Before: Oct 15 03:00:52 2026 GMT
            Not After : Oct 16 03:00:52 2026 GMT
        Subject: CN=80fae2647d00de3ba01346044389a2d4e1788cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:0c:43:b6:88:35:6e:61:3b:fa:39:06:29:
                    3c:44:53:7f:58:5a:ff:e1:3e:a5:a8:46:9c:c9:2d:
                    ac:f2:b3:58:40:9e:fa:f1:92:3c:cf:57:eb:db:d2:
                    ad:79:7e:16:fc:f9:dd:76:13:7c:da:bc:b2:6d:f1:
                    cb:be:38:1f:3f:c7:fe:d0:03:26:a8:32:c0:b6:9e:
                    91:24:f3:fc:ce:04:b0:85:11:28:c3:79:ac:62:51:
                    7d:61:77:8f:e1:16:7e:68:37:0a:39:75:3b:0f:b3:
                    03:49:42:8c:40:51:fc:b7:98:9a:48:d6:ed:77:e9:
                    10:be:a1:e4:fd:68:95:7e:80:8e:36:3b:d3:b6:cb:
                    f1:68:79:25:90:3e:e5:8f:ea:d2:de:5c:9b:12:33:
                    e0:ed:dc:33:fd:8f:54:27:2f:00:3e:a8:f4:45:9f:
                    41:9c:5b:cb:51:4d:47:a2:2e:fd:03:56:91:89:72:
                    93:eb:e7:53:f5:d0:b1:41:3e:54:a1:73:fd:aa:10:
                    ef:a8:1a:c0:4f:eb:a8:3b:89:43:82:71:c2:24:eb:
                    ec:b2:5f:9d:1a:af:d3:5c:99:a2:e2:5d:a7:0b:7f:
                    ec:5e:e5:5c:a3:45:fe:0c:44:88:c1:55:cd:fd:a5:
                    c2:4f:6a:1e:6f:ef:14:29:1e:e4:c7:4d:75:5f:dc:
                    a0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FA:E2:64:7D:00:DE:3B:A0:13:46:04:43:89:A2:D4:E1:78:8C:B8
            X509v3 Authority Key Identifier:
                keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5b:75:d0:38:24:e4:cc:ef:1d:98:6f:dc:75:28:fa:62:b7:
         d4:1f:02:61:69:b1:e3:78:5e:85:7f:c1:35:a3:36:e4:05:ed:
         97:56:0b:7d:00:41:d8:e3:9d:9e:29:71:64:2f:a3:a5:64:76:
         de:a9:d8:a3:9d:a7:43:bc:c4:e2:8e:04:6d:2c:da:20:b8:e6:
         03:e3:c0:0d:81:e3:b2:3a:01:bf:09:c7:2a:da:44:37:b1:62:
         09:8c:46:3c:cd:71:2c:7c:64:3e:97:4d:37:34:1a:6a:00:f5:
         34:29:80:fd:09:17:7f:d4:0f:5e:fe:05:d5:63:62:ca:d8:7b:
         20:4d:da:c6:60:e3:24:d2:1b:98:3f:e4:d3:fa:45:ef:ae:5f:
         c9:d7:f0:01:a5:cb:b8:7d:6c:a6:96:92:cd:82:74:5e:d7:2c:
         50:fb:86:59:58:d2:85:3a:8c:50:41:ab:9b:0e:df:b4:ad:68:
         8f:41:1e:9f:92:7f:f0:4e:bd:5e:5c:d4:50:2c:b7:cb:5c:c0:
         4c:78:6f:ef:33:3f:6e:be:4a:31:2b:e7:9b:8f:f7:17:ed:b0:
         d0:56:b7:5c:f8:29:73:1f:08:f7:7e:c2:33:bf:9d:1a:cc:5f:
         9c:14:af:a9:f0:d4:d1:10:3e:ae:95:d4:5f:65:2f:70:f0:6c:
         b8:eb:5a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:25:12 2026 by rpki-client